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Abstract. Message passing is a key ingredient of concurrent programming. 
The purpose of this paper is to describe the equivalence between the proof 
theory, the categorical semantics, and term calculus of message passing. In 
Q order to achieve this we introduce the categorical notion of a linear actegory 

Y-^ and the related polycategorical notion of a poly-actegory. Not surprisingly the 

notation used for the term calculus borrows heavily from the (synchronous) 7r- 
calculus. The cut elimination procedure for the system provides an operational 
semantics. 
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1. Introduction 



If programs should be viewed as proofs and types as propositions then for what 
proof system are concurrent programs the proofs? Sequential programs are con- 
nected through the A-calculus by the Curry-Howard-Lambek isomorphism to in- 
tuitionistic proofs and cartesian closed categories. Considering the impact that 
connection has had on our understanding of sequential programs, it is reasonable 
to suppose that the answer to the question for concurrent programs might have 
similar and far reaching consequences. 

On the face of it the question seems beguilingly easy. Indeed, one might reason- 
ably be tempted to backward engineer the 7r-calculus - which after all holds in the 
concurrent world an analogous position to the A-calculus - to arrive at an answer. 
However, a moment's thought about the passage between the A-calculus and proofs 
makes one realise that the significant missing component, namely the type system, 
has a huge effect. Adding types to the A-calculus introduces a program discipline 
which, for example, is sufficiently restrictive to provide a guarantee of termina- 
tion. This carries the A-calculus far from its freewheeling role as a description of 
computability. 

Concurrent programs are even more freewheeling than sequential programs and, 
therefore, it is inevitable that collecting them into a proof system will introduce 
a programming discipline which has a similar effect of guaranteeing some strong 
formal properties (for example, being deadlock and livelock free). Unlike the A- 
calculus, however, whose development was concomitant with the philosophical un- 
derpinnings of type theory, the 7r-calculus was developed in a brave new world of 
computing in which operational behaviours sufficed. Thus, the connection to a 
proof system did not seem inevitable or even necessary. 

Despite this it would be a strange world indeed if there was no type theoretic 
underpinning to concurrent programming. There is now a considerable body of 
literature connecting concurrent semantics with linear logic - or at least the mul- 
tiplicative fragment of it embodied by the logic of the polycategorical cut. While 
this perhaps should not be viewed as providing conclusive evidence that linear logic 
is the correct basis in proof theory for concurrent semantics, the argument at this 
stage is quite compelling. Sec for example the work of Abramsky on interaction 
categories [2j [3], of Abramsky and Mellies [5], of Barber, Gardner, Hasegawa, and 
Plotkin [6], and our own work [13 , 24 . In particular, the authors were influenced by 
the much earlier paper of Bellin and Scott [H] in which this connection was pursued 
and which contains further historical commentary. 

So how does one model message passing in this formal setting? Well, of course 
there is a technical answer to that question which covers the pages which follow. 
However, we should draw the reader's attention to one particular aspect of some 
consequence. We model message passing using a two tier logic. There is a logic for 
the messages whose proofs should be thought of as ordinary sequential programs. 
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Then there is a logic of message passing which is built on top of the logic of mes- 
sages. The two logics are really quite distinct: the message logic is concerned with 
what we classically view as computation, while the second logic is concerned with 
manipulating the channels of communication. 

We believe there is a - perhaps somewhat uncomfortable - message in this. Both 
functional and imperative programming language designers have introduced con- 
current features, essentially, by either adding operating system primitives to their 
sequential core or by overloading basically sequential constructs (consider the use 
of monads to obtain 10 in Haskell). However, even the briefest perusal of the rules, 
indicates that the logic concerned with managing channels is at least as compli- 
cated as the sequential programming logic. Furthermore, there are quite significant 
interactions between the two levels. This suggests that trying to place a boundary 
to programming language design at this point is altogether artificial. Thus, we 
believe programming language designers should be thinking in terms of develop- 
ing integrated two tier languages in order to give high-level support for concurrent 
programming - operating system primitives manifestly fail in this regard. 

In this paper we do not pretend that a logic whose proofs are concurrent pro- 
grams is going to be a particularly simple thing. There are many rules involved 
and consequently many equivalences between proofs. However, there is nothing 
dramatically original about the proof theory we present either. It is basically the 
proof theory of (polycategorical) cut (see [10]) with messages. The aim of this 
paper is to lay out in some detail how the expression of message passing is added 
to the logic. The resulting system is necessarily somewhat more complex as it has 
to include the logic of the messages themselves. The logic for message passing is 
then built on top of the logic for messages and embodies the interactions which are 
necessary between the two levels. 

In order to provide a basis which would cover a broad range of semantics we 
decided to use a logic of messages whose categorical semantics is a distributive 
monoidal category. That is a monoidal category with coproducts over which the 
tensor distributes. Explicitly this means that the natural map 



is an isomorphism. The presence of coproducts in the messages allows us to indicate 
how this structure must interact with the message passing level. This is a rather 
crucial aspect of the system we present which allows the contents of messages to 
determine the interaction which actually unfolds. 

In order to illustrate this point consider the following simple program which runs 
a bank machine. A user will insert their card into the bank machine and provide 
their personal identification number, pin, and a request for money, x. The bank 
machine will send this information to the bank which will respond with a transaction 
identification number, tid, and an amount, y, which the bank has permitted the 
bank machine to deliver to the user. This amount may be either the amount the 
user has requested or, in the case the user had made a request which cannot be 
satisfied (e.g., the request will put them over their daily limit or will have them 
exceed their balance, etc.), zero. At this point the bank machine may close the 
communication with the bank. 

The bank machine will then send a request to security to do a check using the 
transaction identification, tid, supplied from the bank. The security check will 



A ® X + A <g> Y 



(lyligiinj, , lA<S>inj r ) 



t A <8> (X + Y) 
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determine, for example, whether the card has been stolen, or whether it has been 
used within the last few hours half-way around the world, etc. The bank machine 
then receives a response, srp, from security indicating that the card is okay, Accept, 
or is not, Deny. If the reply from security does not indicate any problem then close 
communication with security and provide the user with the amount y. If the reply 
from security indicates a problem then the machine will hold on to the user's card 
and not provide any amount of money. The program will then terminate. 

We present the program using the syntax which is developed in Section [3.2| The 
program has type 

usr : Request o (Response •_!_) Ih bnk : Request o (BResponse •_!_), 

sec : Transit) o (SRcsponse •_!_) 

and thus involves three channels labelled usr, bnk, and sec. The typing is given as 

• type Request = PIN * Integer 

• type BResponse = TransID * Integer 

• data Response = Dollar Integer | TakeCard 

• data SResponse = Accept | Deny 

and the program is: 

get usr (pin, x) 

put bnk (pin, x) 
get bnk (tid, y) => 
close bnk 
put sec tid 
get sec srp 

case srp of 

| Accept — > close sec 

put usr (Dollar y) 
end usr 
| Deny — > close sec 

put usr TakeCard 
end usr 

The point of the example is that it shows how values received from other pro- 
cesses can not only effect the values subsequently passed but also the evolution 
of the communications of the whole process. From a proof theoretic perspective 
this means that the coproduct structure must be shared between the value level 
(the messages) and the communication level (message passing). This significantly 
affects the design of the logic. 

It may seem to the reader that we have made a rather esoteric choice of logic for 
the messages. The choice is, in fact, minimal in order to illustrate the interaction 
between the levels. Intuitively, the reader should view messages as values of a 
sequential programming language (as in the above example). However, in this 
paper, we have not committed ourselves to a particular semantics for that sequential 
world. Thus, these values might be from a cartesian closed category or, equally, they 
could be values produced by a partial recursive function (so embody the possibility 
of non-termination). In this latter case, while coproducts are present, products 
(in the usual categorical sense) are not present nor is the setting closed. However, 
notably, it is an example of the minimal structure we present. 



THE LOGIC OF MESSAGE PASSING 



5 



Note that in the above example a rather simple use of the unit _L is made. 
Those familiar with the coherence issues surrounding linearly distributive and *- 
autonomous categories will be aware that the presence of units adds significantly 
to the complexity of determining equality of maps. Thus, it may seem sensible 
to avoid these units altogether in a programming system. However, units have a 
crucial role as it is their behavior which allows the proper opening and closing of 
channels (as was seen in the above example). 

The starting point of our exposition is a description of a logic for the messages 
and a term notation to express the proofs of this logic. The term notation for the 
proofs is essentially the term logic which Barry Jay developed for monoidal cate- 
gories [18] . This logic does not reflect the obvious symmetry of monoidal categories 
obtained by reversing maps and, perhaps for that reason, it did not resonate well 
with work in monoidal categories. Here as we wish to contrast the one-sidedness 
(multicategorical nature) of message logic with the two-sidedness (polycategorical 
nature) of the logic for message passing, it suits our purpose well. 

In more modern terms the message logic is a multicategorical logic with tensorial 
representation: we present the term logic from this perspective (see the work of 
Abramsky [I] and Mackie, Roman, and Abramsky [5T] for similar systems) and 
add a syntax for coproducts. To present the message passing logic, we have built 
on the two-sided logic presented in |13j . In that paper a process reading for the 
two-sided terms of additive linear logic was presented. There, in order to present a 
two-sided notation for the proofs, we borrowed heavily from the notation of the tt- 
calculus. This paper continues this trend by borrowing notation from the 7r-calculus 
in order to express the proofs associated with message passing. 

Having introduced the logic and a term calculus for its proofs, our next aim is 
to lay out the categorical semantics. We claim that this semantics lies in a "linear 
actegory"^] by which we mean a linearly distributive category with a monoidal 
category acting on it both covariantly and contravariantly. This structure arrives 
with a number of coherence conditions which we have tried to lay out reasonably 
carefully. We believe that this description of the categorical semantics of message 
passing is novel. 

The final aim of the paper is to connect the term calculus, the proof theory, 
and the categorical semantics. In order to make the paper more accessible, we 
begin by introducing the proof theory using a sequent calculus presentation which 
is annotated to provide a term calculus. However, the sequent calculus proof system 
is equivalent to a natural deduction system which in turn is a poly-actegory. In the 
last sections, we move rather freely between the proof theory, the poly-actegorical 
semantics, and the circuit representation of these systems. To one who is not 
familiar with these techniques these may seem like large leaps as we have not tried to 
provide a detailed justification of it here. These techniques are described elsewhere 
and originate in Lambek's work |19j . For the linear setting they are described in [ID] , 
where the correctness criterion (i.e., the net condition) for the circuit representation 



The term actegory is used to describe the situation of a monoidal category "acting" on a 
category. They first appeared (under a different name) in the work of Benabou as a simple 
example of a bicategory. B. Pareigis developed the theory of actegories (again under a different 
name) and showed there usefulness in the representation theory of monoids and comonoids. The 
word "actegory" was first suggested at the Australian Category Seminar and first appeared in print 
in the thesis of P. McCrudden 1201 where they were used to study categories of representations of 
coalgebroids. 
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of proofs is also discussed: this, although present in the current proof system, we 
barely mention. 

The last sections are concerned with establishing the following three-way equiv- 
alence: 

proof theory category theory 

poly-actegory linear actegory 




term calculus 



message passing 

Outline of the paper. In Section 2 we introduce the logic of messages. Section 3 
introduces the logic of message passing which is built atop the logic of messages and 
supplies the step from the proof theory to the term calculus. Also, we introduce the 
cut elimination process for the logic and so, implicitly, an operational semantics for 
the calculus. In Section 4 we introduce the categorical semantics. In Section 5 we 
show how to obtain the categorical semantics from the term calculus. In Section 6 
we show how to move from the categorical semantics to the poly-actegorical se- 
mantics and back using represent ability. Whence, by the identification of the proof 
theory and the poly-actegorical semantics, we complete the tour of the triangle. 



2. The logic of messages 

In this section a logic for monoidal categories with coproducts is developed. The 
logic is presented in a Gentzen sequent style: a sequent takes the form 

where the antecedent (which we will also call the context) of the sequent $ is a 
comma separated list of formulas and the succedent A is a single formula. It is 
convenient to take the antecedent to be unordered as this allows the permutations 
of the formulas without having to add an explicit exchange rule: 

$1,5,(7, $ 2 I- A 
exchange — — — , — — . 

$x,C,B,$ 2 \- A 

The inference rules for this logic are presented in Figure [T] Notice that the cut 
rule here is called "sub" to stand for substitution. 

We will consider only the free logic built from a multicategory. This means 
that we have an arbitrary set of atoms that will be regarded as the objects of 
a multicategory, and an arbitrary set of axioms which will be regarded as the 
morphisms of a multicategory. The resulting logic will be denoted by Msg. 

2.1. A term calculus for Msg. We now introduce a term calculus for this logic. 
The idea is that, given a derivable sequent, to annotate the formulas on the left 
of the turnstile ("I - ") with "patterns" made up of variables (x, y, z, . . .), and the 
formula on the right of the turnstile with a term (/, g, . . .) which together describe 
a derivation of the sequent. 

Given a derivable annotated sequent <f> h A its annotation and corresponding 
term are constructed inductively (top-down) from the derivation. The description 
is given in Figure [2j 
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f hi 


subs 




* 2 1" B 


*i 












II 


$ h A 
$,Ih A 




h / 


coprod 


$,4hC $,BhC 








$ h A + B 









$hB 


$,0h4 


inj r 





Figure 1. Inference rules for Msg 



axiom / 


$h/:A *i,ti):4,$ 2 l-ff:5 


x 1 :A 1 ,.. . ,x n :A n \- f(xi, ...,x n ):B 


*i,<I>, * 2 I - (w 1 — * 9) f • B 


$,x:A,y:Bhf:C 


<b\- f : A if/\- g: B 


$,(x,y):A*Bhf:C 


$,*h(f,g):A*B 


<S> h / : A 
$,(): Jh/:A 


h():J 


$,x:ih/:C &,y : B \- g : C 


$ h / : ^ 
*h<7i(/) :i + B 


( (Tl(x) H> / 1 

$,z:4+Bh \z:C 
{ cr 2 (y) ^ g J 


$,z:0h{}z:4 


$ h / : B 
$h<T 2 (/) :i + B 



Figure 2. Term formation rules for Msg 



For the identity derivation on atoms x : A h A, instead of 1a(x) we will simply 
write x. That is, for atoms, the term formation rule is given by 

atomic A 
x : AV- x : A 

In order to avoid variable name clashes, an assumption that will be made is that 
whenever two or more annotated sequents are involved in a derivation (i.e., a sub, 
* r , or coprod rule) no two will contain a variable name in common unless mentioned 
explicitly. 

Notice that different derivations of the same sequent will be described by the 
same annotation. For example, notice that the derivations 

h () : / x : AY- x : A h ( ) : I 

x:AV-x:A ():/h():J and x : A\- (x,Q) : A* I 

x : A, ( ) : I h (x, ( )) : A * / x : A, ( ) : I h (x, ( )) : A * I 

(x, ()) : A * I \- (x, ()) : A * I (x, ( )) : A * I h (x, ( )) : A * I 
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are both described by the annotation 

(x,()):A*Ih(x,()):A*I 

and are therefore implicitly identified in the term calculus. 

Here are two derivations of the same sequent in which the terms describing the 
derivation differ. 



x : Ah x : A y: Ah y: A 



(1) 



z-.A + AV- 


J CTi(x) 1— > X 

\ <r*{v) 2/ 


| z : A 


z : A + A\- oi( j 


<Ti(a;) i ► x 1 
ff 2 (y) >-> 2/ J 


z) : A + B 



AV- x : A 



y.Ahy.A 



(2) 



4hffi(x):A + 5 y : A h <7i(y) : A + B 



A + AV- 




A + B 



It will be seen in Section 12.31 that these two terms must be identified 



2.2. Cut elimination for Msg. In this section the cut ( "sub" ) elimination rewrites 
are described. Recall that, unless explicitly mentioned, a term may not contain a 
variable name in common. 

Notice that the *; and rules have no effect on the terms. In these cases the 
term is actually encoding an implicit cut elimination step. For example, both the 
left-hand and right-hand derivations in the cut elimination step 

9x,A,^ 2 ,B,C\-D $hi ^ 1 ,A,^2,B,C h D 

$hi $i, J 4,$ 2 ,B*ChD =5> *i,$,f 2 ,B,Ch D 

$i,$,$ 2 ,B*C^ $i,$,* 2 ,5*Chfl 
are represented by the same term. 

In what follows the notation /[y/x] will mean "in / substitute y for all occur- 
rences of x" . Also to recover the type of a term $ h / : A we denote Cont(/) = $ 
and Out(J) = A. 

The cut elimination rewrites are as follows. 



[id-sequent] (w t— > /) x ==> 

[sequent-id] (io i— ► tw) <jf => 

[sequent- * r ] (w h-> (gi,g 2 ))f 
[sequent-coprod] 

[coprod-sequent] (to i— > g) 



f[x/w] 
9 




((to ^ Si)/ ,52) we Cont(gi) 
(51 , («J ^ 52)/) w e Cont(p 2 ) 

i-> (w i-> gi)/ 1 
0-2(2/) H («i H .92)/ J 

J (Ti(x) 1 ► (10 1 > 
1 cr 2 (y) 1— v (io 1— ► 5)/ 2 
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[sequent- 0] => { }z 

[0-sequent] (w \— ► g)({ }z) => {}z 

[sequent-inj ; ] (w ^ <Ji(g)).f i-> #)/) 

[sequent- inj r ] {w^a 2 {g))f — > a 2 {{w^>g)f) 

[* r -*i] ((x,y) ^ g){h,h) —> {x^> {y^> g)h)h 

[Ir-h] (0^5)0 => 5 



/ <Ti(x) i-> gi \ 

[inji-coprod] U h-> ^ W W/) — > {x^gijf 

V (Til 7/1 I — > (7o / 




[inj r -coprod] (z^< W )a 2 (/) => (y >-> 32)/ 



The cut elimination procedure accounts for all the ways in which a cut can move 
above a compound formula which is introduced either on the left or on the right. Of 
course the cut elimination procedure will get stuck on the atomic cuts (composition) 
in the multicategory. However, it is easy to check that, if composition terminates 
in the underlying multicategory, this process will terminate. Indeed, in terms with 
only primitive function symbols (no axioms) which only involve primitive types (no 
atoms) the cuts can be completely eliminated. 



2.3. Equations in Msg. In order to ensure that the cut elimination procedure is 
confluent identities (for which we use the notation " |=| " ) between cut eliminated 
terms need to be introduced. Firstly, if /, g, and h are axioms, equations are needed 
describing the associative law and interchange law. For associativity suppose 

$h/:A, V u x : A,^ 2 \~ g : B, and #i, y : B, *' 2 h h : B. 



for which the identity 



(y >-> h)((x 1 ^ g)f) 1=1 (x^> (y^> h)g)f 
describing associativity must be added. Similarly, for the interchange law suppose 

$h/:A, $'h ff :B, and #1, x : A, tf 2 , y ■ B, * 3 h h : C. 
The identity 

(y^(x^> h)f)g |=j (x^> (y^ h)g)f 

describes the interchange law. 

We now move on to examining the compound terms. Here is an example which 
shows how such an identity arises. There are two ways to cut eliminate the top 
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term in the following diagram. 



O i-> (51,52)) 



<J\(x\) H-> /1 




(™ ^ (Sl,02))/l 

(u> (gi,g 2 ))f2 



9i) f 1,92) 
9i) f 2, 92) 



and this forces the identity at the bottom of the diagram. Similarly, the identifica- 
tion of the two terms at the end of Section [lO] arises from the following diagram. 



(w i-> cri(/)) 



£Tl (x) h+(<Wh+ CTl(/))5l 

cr 2 (y) i-» (w i-> o"i(/))sr 2 




J tri(ac) h-> <ti((«j h-> 
\ cr 2 (y) H-> (Tl((tU h-> /).g 2 ) 

The list of identities which are introduced into the system in this manner arc 
presented in Figure [3] 

Example 2.1. The cut elimination procedure allows us to prove the distributive 
law. This involves proving that the composite of 

w : A* x : (B + C) ^ A * B + A * C 

\ CTi(xi) 1 ^ C\{{w,X\)) 1 



o- 2 (x 2 ) i-> cr 2 ((w,x 2 )) 



and 



z:(( 2 / 1 , 2 / 2 ):A*S+(z 1 ,z 2 ):A*C) — — ->■ A*(B + C), 

I o-i{{vi,y2)) <->■ (yi,cri(y 2 )) I 

[ cr 2 ((zi,z 2 )) (zi,cr 2 (z 2 )) J 
and its reverse, are the identity. The above composite gives: 
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h)((x^g)f) \=\ (x 
(x i ^ (=1 (x 



(1) (y 

(2) (y 

(3) 
(4) 



(5) 



(6) u\ 



(7) 2 



(8) (/,{}*) |==| {}z 

(9) ({}z,g) |=| {}z 

0-2(2/) !-» { J 

(11) CTl ({K) 1=1 {}z 

(12) a 2 ({}z) |=| {}z 



f,g,h atomic 
f,g,h atomic 
(/i,<?) 




{}z 



Figure 3. Identities in Msg 



J oi((j/i,j/ 2 )) i-» (yi, ai(?/2)) 1 \ /J oi(xi) 1-^ CTi((io,a;i)) 

I <T 2 ((-2l,2; 2 )) H-> (Zl, <7 2 (z 2 )) J / VI 2 (x 2 ) >~> 2 ((w,X 2 )) 

4 [coprod-sequent] 

, s ( f oi((yi,y 2 )) ^ (2/1,01(2/2)) I \ 
0-1 (xi) ^ zh z ki(Kii)) 

V I o- 2 ((zi,z 2 )) i-> {zi,a 2 {z2jj I / 

, s / J oi((2/i, 2/2)) ^ (2/1,01(2/2)) 1 \ 
ff iN H ZH ,, „ , , „ o- 2 ((u;,x 2 )) 

V [ o- 2 ((zi,z 2 )) (zi,<t 2 (z 2 )) J y 

-|| [inj-coprod] 



> a; 
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01 (xi) i-> ((j/1,2/2) (yi,oi(y 2 )))(w,xi) 
02(2:2) i-> ((21,-32) >-> (21, 02(^2))) (to, x 2 ) 

01 (xi) i-> (yi i-> (j/ 2 !-> (yi,oi(2/ 2 )))xi)w 

02(X 2 ) l-> (Z! I ► (z 2 H-> (Zl,cr 2 (z2)))x 2 )w 

JJ- [id-sequent] 

01 (xi) h-> (j/ 2 (to,oi(2/ 2 )))xi 
o- 2 (x 2 ) i-> (z 2 ^ (w,cr 2 (z 2 )))a; 2 

Jj- [id-sequent] 

oi(xi) h-> (w,ai(xi)) 
o 2 (x 2 ) h-> (w,o 2 (x 2 )) 

where this last is (one form of) the identity map of A * (B + C). The other way 
around also works (giving the identity on A * B + A * C) and is left for the interested 
reader to familiarise themselves with this calculus. 

3. The logic of message passing 

This section introduces the sequent rules for the message passing logic which 
will be denoted by PMsg. As the message passing logic is built on top of the 
logic of messages - which in this case we are taking to be Msg - the logic involves 
inference rules whose premisses are inferences of both systems. In order to help the 
reader keep this straight we shall use two different entailment symbols: "h" for 
the messages themselves and "lh" for the message passing logic. For example, the 
inference rule has the form 

7T n 

I T,A»X\Y- A 

where it denotes a derivation in Msg and II a derivation of PMsg. 

Semantically the message passing logic builds a linearly distributive category 
(which, when linear adjoints are present, is just a ^-autonomous category |12j ) 
from the underlying message logic. This linearly distributive category, as we shall 
see, is part of a linear actegory. The term calculus, which we construct in the next 
section, then becomes a very basic language for concurrent programs which can 
pass as values the messages provided by our message logic. 

A sequent of PMsg has three components: the message type context its input 
message passing types T, and its output message passing types A which together 
define a sequent of PMsg: 

$ I r ih A. 

We shall treat all three components as unordered lists. 

The axioms for the message passing logic should be regarded as being maps in a 
poly-actegory. A poly-actegory (see Section [6| is a symmetric polycategory whose 
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components have certain inputs from a multicategory. Intuitively one may think 
of such an axiom as a process between certain channels which is parameterised by 
certain values (from the sequential world). The usual associativity and interchange 
laws hold for this (multi and) polycomposition. 

The inference rules for PMsg are presented in Figure [4] Our convention will 
be to denote formulas from the message logic Msg using uppercase letters from 
the beginning of the alphabet A, B, . . . and unordered lists of these formulas using 
$ and 'J. Formulas from the message passing logic PMsg will be denoted using 
uppercase letters from the end of the alphabet X, Y, . . . and unordered lists of these 
formulas using T and A. 

Most of the rules of this calculus are just the standard ones for two-sided mul- 
tiplicative linear logic. The main novel aspects are the "action" rules o ; , o r , 
and » r , which allow messages to be bound to channels of interaction in the message 
passing logic PMsg. However, also notice that the effect of a sum of messages can 
be derived from how they are passed in PMsg. 

3.1. Term calculus for PMsg. The term calculus we now introduce for message 
passing should be thought of as a very basic language for concurrency which per- 
mits point-to-point interactions along channels. In order to refer to the individual 
formulas of a sequent, which are to be thought of as the channels through which 
the process embodied by the sequent interacts, we shall label them with "channel 
names" using lowercase Greek letters. For example 

(x, y) : A * B, z : C \ a :W <g> X Ih (3 : D • Y, 7 : Z. 

In the 7r-calculus much emphasis is lain on how these channel names are prop- 
agated. In particular the ability to pass channel names as messages introduces 
scope extrusion and the necessity for channel relabeling. The calculus we present 
is not as free ranging and does not allow the passing of channel names as messages. 
In particular, here we distinguish sharply between the world of messages and the 
mechanisms for message passing. It might, therefore, be supposed that the ability 
to pass channel names is completely absent from this system. However, this is not 
the case. Although we have not chosen to concentrate on these issues (or abilities) , 
in fact they are already present in the message passing calculus. In the 7r-calculus 
message passing is the only mechanism present and so passing of channel names 
has to be achieved by passing them as messages. In the current calculus, signifi- 
cantly, there are other mechanisms present, in particular, one can bundle channels 
together (using the tensor or the par) and, thus, one can pass simultaneously on a 
channel multiple channel names along which the receiving process can subsequently 
interact. The issue of scope extrusion is actually handled in the cut elimination 
procedure which, in effect, also defines the operational semantics of the system. 
Particularly relevant in this regard is the ® r — ®i cut elimination step which shows 
how a process can use channel names which are passed to it. 

Modern process calculi are also concerned with the issue of " mobility" : this 
means both computation carried out on mobile devices (i.e., networks that have a 
dynamic topology), and mobile computation (i.e., executable code that is able to 
move around a network). For example, the ambient calculus [IT] of L. Cardelli and 
A. Gordon was introduced to addresses these issues: ambients being conceptual 
locations in which computation can occur. The calculus we have presented is not 
intended to address these issues and, indeed, is completely neutral on its "ambient" 
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$ I lh Ai.X *|A,r 2 lhA 2 

cut l — 1 '— — 

$,* I r x ,r 2 ih A l5 A 2 

atom id | x h X axiom $ | r Ih A 

$|r,x,yihA $|Ti ih a^x *|r 2 ihy,A 2 



&\r,x ®yih a r $,*|ri,r 2 11- a u x®y,a 2 

^ITuXU- Ai *|y,r 2 ihA 2 $|rihx,y,A 
$,*|ri,x©y,r 2 IP a 17 a 2 0r $ | r ih x © y a 

$ | r ih a ^ 

$|r,TlhA T ^0|lhT 

$ I r ih a 



-Lf I _L Ih -U 



$ | r ih _l,a 

$,A|r,xihA $hi *irihx,A 



$|r,AoxihA ' | r ih Aox,a 

$hi *|r,xihA <j>,a | r ih a,a 



$,*|r,A.xihA $|rihA«x,A 

$,ABirihA $|rihA 



$,^4 * b | r ih a $, / I r ih a 

, $,AirihA $,sirihA 

coprod W^b\t¥a *,o|rihA 

, *h^ $,,4|rihA 

subs 

I r ih a 



Figure 4. Inference rules for PMsg 



implementation. It is, of course, a pertinent issue of how to model ambient calculi 
categorically and proof theoretically: this may provide a useful mathematical and 
logical insight into these calculi. 

As discussed above, the cut elimination procedure forces the behavior of scope in 
our calculus and, thus, the channel renaming which is necessary. As we are using a 
two-sided calculus it is possible to have completely separate name spaces for input 
and output channels. The "plugging together" of processes on a channel - which is 
a cut — binds an output channel of one process s to an input channel of another t 
and, thus, may be denoted by an infix syntax: 



s a ;pt 
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where we assume s and t have distinct output channel names and distinct input 
channel names. We will also allow the use of the simpler 

s , a t 

where a is both an output channel bound in s and an input channel bound in t. 
Once a channel name is bound it can be renamed to any unused name and, indeed, 
this may be required to reassociate cuts: 

(s a)a' t) 0]/3' U — S a ; a i (t p]p> u). 

Here this equality is only valid without renaming if a' In(u) and f3 ^ Out(s), 
although with renaming this associativity is always valid. 

We now describe the term formation rules. The terms presented here make use 
of the self-dual nature of the logic. That is, term formation rules for dual inference 
rules (e.g., <g>; and @ r ) will be identical. This agrees with the process reading of 
the rules when there is no distinction made between being an input channel and an 
output channel. 

The notation is used to denote the term-type membership relation, e.g., 

s :: $ | r Ih A means that s is a term of type <j> | T Ih A. The lengthy syntax will 
not permit us to present these rules in a table, and so we do so as a list. However, 
a summary of the term formation rules is provided in Figure [5] 



[cut] 



$ | Ti Ih Ai,a : X t :: * | (3 : X, T 2 Ih A 2 



s a ;p t :: $,* | r lf r 2 Ih A l5 A 2 
[atomic identity] a = x p :: % \ a : X h (3 :Y 

s($)[r; A] primitive process 



axiom 



s(x 1 , . .. ,x r )[ati,.. .,a m ;Pi,. . . ,0 n ] :: x : $ | a : V Ih /3 : A 
where a : T stands for a± : A±, . . . , a m : A m etc. 



and 



aicti, a.<z) 



s : 



s : 



$ | r,ai : X,a 2 : Y Ih A 



$ | T,a : X(g> Y Ih A 
$ | T Ih ai : X, a 2 : Y, A 



$|riha:X©y,A 



and dually 



and 



and dually 



St : 


* ] Ti 


ai 


X Ih Ai 


«2 


:: * 


| a 2 ■. r,r 2 Ih A 2 
















a 


::$,*| 


r x ,a : 


X® 


y,r 2 ih a 1; a 2 
















si : 


$|r x 


Ih A 


i, ai : X 




:: * 


|r 2 lha 2 :F,A 2 






Sl 










a 




ri,r 2 


Ih A 


, a : X <g> F, A 2 




a 2 h-> 


S2 











16 J. R. B. COCKETT AND CRAIG PASTRO 

[Ti and _L r l ^ ■ — — — and dually 

1 1 $|r,a:TlhA 

sr. $ I T Ih A 



a() ■ s :: $ | T Ih a : _L,A 
[_L ; and T r ] a[ ] :: | a : _L Ih and duau y 



a[] :: | Ih a : T 

for and »J — ! — and dually 

a(x)-s:: $|r,a:AoXlhA 

s :: x : A, $ | T Ih a : A, A 



a(x) ■ s :: $ | T Ih a : A • X, A 



A process reading of the terms for the [o t and » r ] inferences may be thought of 
as follows: read x on channel a and bind it in the process s. 

r j , $h/:A s::* |r,a:XlhA „ 

•i and oJ and dually 

a[/]-s::*,tf | T, a : A.XIh A 

<f>\-f:A s :: * | T Ih a : A, A 



a[/] • s :: | T Ih a : A o X, A 



A process reading of the terms for the [•/ and o r ] inferences may be thought of 
as follows: output / on channel a and continue with the process s. 

s :: x : A,y : B \ T Ih A 



[I] 

[coprod] 



s :: (x,y) : A* B \ T Ih A 
s :: $ I T Ih A 



s :: $,(): 1 1 T Ih A 

s :: $,x : A \ T Ih A t :: y : B | T Ih A 
:: <f>,z : A + B I T Ih A 




[°] { }z :: z : | T Ih A 

r , . . , <f>\- f :A s::*,x:^|rihA 

substitution 1 

(x h-> s)/ :: | T Ih A 

3.2. A programming syntax term calculus. The term calculi for PMsg pre- 
sented in the previous section is quite useful for manipulations of the logic, but it 
does not illustrate well the programming view of those proofs. To illustrate this 
relationship, and to connect with the example in the introduction, we present a 
programming syntax for PMsg similar to the syntax presented in [T3] . 

Coproducts in programming languages are usually introduced as (non-recursive) 
datatypes and so it is useful to show how this may be incorporated into the message 
logic. A non-recursive datatype is defined as 
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cut 

atomic id 



and 



Tj and _L r 
o t and » r 



subs 



t 



s a ;p t 
a =x P 



a(a\, a 2 ) ■ s 



a{) • s 
s 

a(x) ■ s 

s 
s 



coprod ( ai ( x ) | — ^ s 
] cr 2 (y) ' ^ i 



J; s_ 

(as i-> s)/ 



axiom S ($)[T;A] 
si s 2 



and 



_L; and T 
•i and o 



ai i— > si 

Q 2 « 2 



r a[ 
f 



4f] 



{}; 



Figure 5. Summary of the term formation rules for PMsg 



data F{A X , ...,A n ) = C X T X | • • • | C r T r 

where Tj is a type expression in variables Ai, . . . , A„. Note that, in contrast to the 
message logic in which coproducts were defined using a binary rule and a miliary 
rule, here we are defining coproducts indexed by an arbitrary finite set of construc- 
tors. This means in particular that this definition also captures miliary and unary 
coproducts. 

Two rules are needed to introduce the syntax associated with this datatype: 
xt : Ti h fx : B ■■■ x r : T r h f r : B 



coprod 



construct 



<I>, z : F(Ai, . . . , An) b case z as | C\X\ — > /i : -B 



$ b / : 



| C r x r ^ t /* r 



subs 



^hC i f:F(A 1 ,...,A n ) 
A convenient programming syntax for substitution is given by: 

$\-f:A f 1 ,w:4,f 2 l-j:B 
^i, <&, ^ 2 b g where w = f : B 
A programming syntax for PMsg is given in Figure [6] The only novel aspect 
here is the syntax for the action rules and the rules for the interaction between the 
two logics. 



3.3. Cut elimination for PMsg. In this section the cut elimination rewrites are 
described. Recall that unless explicitly mentioned no two subterms of a term may 
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cut 


s t 
ona = |3 plug s to t 






atomic id 


a = x (3 


axiom 


a ($) [r ; A] 


<8>z and © r 


s 


ffii and 6d 


si s 2 


split a as a\, a 2 ; s 


fork a as | ai — > Si 


T; and _L r 


s 


J-i and T r 


a 2 — » s 2 


close a; s 


end ct 


o; and » r 


s 


and o r 


f * 


gel CI X =r* O 


put a f; s 


* 


s 
s 


I 


s 
s 


coprod 


S\ • ■ ■ s r 






case z of Cixi — > s\ 






subs 


/ 8 

s where x = f 







Figure 6. Programming syntax for PMsg 

contain a variable or channel name in common. Also recall that the notation s[a/0\ 
means "in s substitute a for all occurrences of /?" . 
To recover the type of a term 

s :: $ | T Ih A 

denote Cont(s) = In(s) = T, Out(s) = A, and Chan(s) = T U A. These are 
respectively the context, input channels, output channels, and channels of the term 
s. Similarly for <I> h / : A in Msg we have Cont(/) = <& and Out(/) = A. 

Since there are two types of cuts, substitution and cut, the rewrites will be split 
into two sections. 

3.3.1. Cut rewrites. A cut in the message passing logic has the form 

n IT 

$|riihAi,A *|x,r 2 ihAi 
|ri,r 2 ihA l7 A! 

where both are derivations in PMsg. The rewrites to eliminate cuts are as follows, 
[id-sequent] a =x (3 p' n t => t[a/-f] 
[sequent-id] s 7 ; a a = x (3 s[(3/j] 
[0 ( /©r-seq] a{ai,a 2 ) ■ s p- n t => a(a 1} a 2 ) ■ (s f n t) 
[seq-(X>//©r] s - n a(a 1 ,a 2 ) -t a(a 1} a 2 ) ■ (s ; 7 t) 
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[®i/® r -seq] a 



;/j_ r -seq] 
[seq-T//_L r ] 
[o; /» r -sequent] 
[sequent-o ; /» r ] 
[• ; /o r -sequent] 
[sequcnt-»;/o r ] 

[coprod-seq] 



[T r -Tj] 

[J-r-J-l] 
[°r-°l] 



Oil !— » Si 

a 2 i-> s 2 



[seq-8;/®r] s p' n a 



ai i ^ ii 
a 2 i ^ *2 



"i i-» si /?; 7 f 

«2 l-> S 2 
Oil !— » Si 

«2 i-» s 2 /3; 7 f 

ai^s /35 7 ii 
a 2 i ► t 2 

OL\ i ^ ti 

«2 ^ S /3! 7 *2 



if /3 e Out(si) 
if /3 e Out(« 2 ) 
if 7 e In(ti) 
if 7 e In(i 2 ) 



a( ) • s p- n t 
s p- n a( ) • t 
a(x) ■ s p' n t 



«<>■(« /j; 7 *) 

■ a (a;) • (s £) 



s a(x) • t a(x) ■ (s p- n t) 
a[f] -s p; 7 t => a[/] • (s ,g; 7 t) 
s p- n Oi[f\ ■ 1 «[/] ' ( s 0n t) 



[seq-coprod] s 

[O-sequent] 
[sequent-O] 



<j\(x) i ^ Si 
cr 2 (y) h-> s 2 

J (7l (x) i ^ ii 
{}z p- n t {}z 

* /j; 7 {> z => {> z 



/3! 7 



0-1(2;) i-> si /3; 7 t 

0-2(y) ^ s 2 /35 7 t 

ai(x) 1 ^ s /3; 7 ti 
0-2(2/) s /35 7 h 



a 



Oil !— > Si 

a 2 i-» s 2 



a(ai,a 2 ) ■ s a ;p (3 



02 l-» *2 



Si 01 ift (S2 q 2 ;/3 2 *) 

(s ai5/3i *l) q 2 ;/3 2 *2 



a[ ] a ;p 0( ) • t => i 

a( ) • s a ;/3 /3[ ] => s 

<*[/] ■ s a ;p 0(x) -t => s a ;p (x ^ t)f 

a(x) ■ s a ;p 0[f] ■ t => (x^ s)f a \p t 
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The last two "action" cut elimination steps (the [o r -o;] and [•,--•/] rewrites) are a 
bit novel so it will be nice to see an explicit sequent cut elimination. This is the 
o r -oi cut elimination step. 

7T n n' 

$ih/:i $ 2 |rilhX,Ai 



$i,$2 | Ti lhAoX,Ai 



*,A\r 2 ,XU- A 2 
* | T 2l AoX Ih A 2 



$i,$ 2 ,*|ri,r 2 ii- Ai,a 2 



n' 



n 



$ 2 1 ri ih x,Ai 



$ih/:A | T 2 ,X Ih A 2 

$1,* I r 2 ,xih a 2 



$i,$ 2 ,* I r l7 r 2 ih Ai,a 2 

Notice that there are basically two kinds of interactions which are modeled by the 
cut. The first is that one or the other of the terms is not active on the channel 
of the cut. In this case the reduction is to pass the other process into where it is 
active on that channel. Notice in particular how a message gets evaluated when it 
is passed. The other possibility is when the cut is on a channel for which, on both 
sides, the type formation is the leading component of the term, i.e., both terms 
lead with activity on that channel (the last six rewrites above) . In this case we get 
a reduction which breaks down the type. 

3.3.2. Substitution rewrites. A substitution in the message passing logic has the 
form 

7T n 

$,A|rihA 



| r ih a 

where 7r is a derivation in Msg and II a derivation in PMsg. There are eleven 
substitution rewrites as follows. 



[subs- 



[subs-©; 



(w i ^ a(ai,a 2 ) • s)f 



a(a 1 ,a 2 ) ■ (to 



to i ^ ot 



OL\ I ^ s 
a 2 >—> t 



(w 1— ► 


*)/ 




OL\ I ► 


(to 1— 


►*)/ 


a 2 i ► 


i 




ai i— » 


s 




a 2 i ► 


(to 1— 


►*)/ 



if to e Cont(s) 
if to e Cont(i) 



[subs-T z /T r ] (to i-> a( ) • s)/ ■ 
[subs-o;/» r ] (w i— > • s)/ 

[subs-«i/o r ] (to i-> a [5] • s)/ : 



[subs-coprod] to 1 



a( ) ■ (to i-» s)/ 
a(a;) • (to s)/ 

J a [5] • (w 1 ^ s)/ 
\a[(w h-> g)f] ■ s 



if to e Cont(s) 
if to e Cont(gf) 
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[subs-O] (to h-> {} z )f => {}z 

[* r -*] {{x,y) s)(f,g) =^> (x ^> (y ^> s)g)f 
[I r -I] (()^ a )() => * 

f [ ffi(l) H 8 | \ 

[inj ; -coprod] z < z => (a; s)/ 

V 1 ^2(y) «i J / 

(( ffl(l) H S ] \ 
2 s . N ? ^ ct 2 (/) => (y i-> *)/ 
I cr 2 (y) I / 



Presented as a derivation the [inj;-coprod] rewrite is: 

7T n rr 



$ h / : A x : A, # | r lh s A j, : Y, # | T lh t A 



$hai(/):X + Y z: A + F,* |rihA 



| r ih a 

4 



n 



$ h / : X x : A,* | T lh s A . 

I r ih a 



3.4. Equations in PMsg. As in Msg, in order that the cut elimination procedure 
is confluent identities between the cut eliminated terms must also be added here. 
Slightly unusual is the fact that this system has two distinct cut rules. So that 
one is not given preference over the other, in addition to the usual rewrites (which 
do not involve either of the cut rules), an identity is required which allows the 
interchange of these two cut rules: 

7T n' 

n $ihA *,A|r 2 ,xihA 2 

$ 2 | Till- A", Ai $1,^ | r 2 , A Ih A 2 

$i,$2,* |ri,r 2 ih Ai,a 2 
I 

n rr 

7T $ 2 | Ti Ih A", Ai ^,A|r 2 ,AlhA 2 

$i h A $ 2 ,^,A | r 1; r 2 ih Ai,a 2 

$i,$ 2) * I ri,r 2 ih Ai,a 2 

This is called the [cut-subs] interchange below. 

In presenting the identities we shall always assume that both sides make sense. 
For example, the equation 

a(x) ■ /?[/] • s h=| /?[/] • a(x) ■ s 

only makes sense if x does not occur in Cont(/). 
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Many of the identities below simply express that actions on one channel should 
be independent - as far as is possible given the bindings - from actions on another. 
Thus, although there may seem to be a lot of equations their genus is quite simple. 

• The two cut rewrites. 

[subs-cut] (x i-> s)f p- n t |=| (x i ► s f3- n t)f 
[cut-subs] s p- n (x h-> t)f |=| {x i ^ s p- n t)f 

• Rewrites involving ®; or © r . 

[®z/e r -®j/®r] a(a 1 ,a 2 ) ■ 0(0i, P 2 ) ■ s (=1 P(Pi,/3 2 ) ■ a(oii,a 2 ) ■ s 

[<E>l/® r -®l/®r] 

( 



a{ai,a 2 ) 



Pi i-» s 



1=1 < 



P 



if a.\,a 2 € Chan(s) 
if ai,a 2 € Chan(i) 



/3i i ^ a{cti,a 2 ) ■ s 

Pi i-> s 
k [ /3 2 i-> a(ai,a 2 ) • i . 

/©r-T//_L r ] a(ai,a 2 > •/?()• s (=1 P( } • a(ai, a 2 > • s 
5;/©r-°;/»r] a(ai,a 2 > • P(x) ■ / 1=1 /3(a;> • a(a 1 ,a 2 ) ■ f 
5;/ffir-»;/°r] a(a 1 ,a 2 ) ■ (3[f] ■ s \=\ /?[/]• a(ai, a 2 ) • s 

<Ji(x) i— > s ] I ai(a;) i— > a(ai,Q! 2 ) • s 



;/© r -coprod] a(ai,a 2 ) 

{ v 2 {y) i-» t 
[®i/8r-0] a(ai,a 2 ) • { 1=1 { }z 



3 1=1 



0-2(2/) ^ a(ai,a 2 ) ■ t 



• Rewrites involving (Bi or £g) r . We only describe an interchange occurring on the 
left-hand (the oti) branch. Similar rewrites are needed for the right-hand (the a 2 ) 
branch, but are omitted here as they are easy to infer. 



/®r-®l/<»r\ a 

/<g> r -Tj/-L r ] a 

)//®r-°i/»r] OL 

)i/®r-»i/°r] " 



a 2 >—> t 



#2 i-> s 2 



ai h-> /3( > • s 
a 2 1— » i 

ai 1— > /3(x) • s 
a 2 1— > i 

ai ~ /?[/] • 

Q! 2 !— > i 



1=1 /? 



1=1 /?<>■<* 

1=1 /3(x) • a 
1=1 /?[/] • " 



/3i a 

@2 l-» «2 

a 2 1— » i 
ai 

a 2 t 
ai 1 ► s 

OL 2 I ► t 



a 2 i-» f 
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-coprod] a 



-0] a 



ai 
a 2 

Oil i 

a 2 i 



CTlO) 

02(2/) 



s 2 



1=1 < 



cti(x) i ► a 
a 2 (y) i-> a 



ai 


1 — > 


Si 


> 


a 2 


1— > 


t 


> 


ai 


1— > 






Ct2 


1— > 


t 


> 



{}^ 



1=1 {}^ 



• Rewrites involving T; or _L r . 

\T l /± r -T,/± r ] a()-0()-8 \=\ 0()-a()-a 
[T;/± r -o,/. r ] a( ) • /?(*) • s |==| ■ a< ) • s 
[T*/± r -.;/o r ] a( ) • /?[/] • s /?[/] ■ a< ) ■ « 

{01 (x) I ^ S 1 | 
02(2/) ^* J [ 
[T,/± r -0] a<> ■/?{}■« /3{} 

• Rewrites involving o ; or » r . 

[°i/»r-°i/»r] a(x) ■ f3(y) ■ s |=| • a (a;) • s 
[o ; /. r -. ; /o r ] a(x) • /?[/] • s |==| /?[/] • a(x) ■ s 



cti(x) i-> /3( > • s 
a 2 (y)^/3()-t 



[o//» r -coprod] a(x) 



0-1(2/1) !-» s 
v 0-2(2/2) i-» f 

[o ; /.,,-0] a(x) • { }z 1=1 { }z 



01(2/1) i-> a(x) • s 
02(2/2) i-» a(x) • t 



• Rewrites involving or o r . In this case we must also investigate the message 

terms which are passed by the and o r rules as they may also lead to interchanges 

with the coproduct or rules. Thus, the two distinct interchanges for each of the 
coproduct and rule. 



[•i/o r -.,/o r ] a[f] ■ /%] ■ s |=| /%] ■ a[f] ■ s 

ffi(i) ^ s 1 I 

02(2/) J I 



[•j/o r -coprod] a[f] 
[• ; /o r -coprod] a 



01 (x) 1 ^ / J 
02(2/) ^5 J 
[•i/or-0] a[/]-{}* 1=1 {}^ 
[•//o r -0] a[{}z] -s 1=1 {}z 

• Rewrites involving the coproduct. 



s 1=1 



cti(x) i-> a[/] • s 1 
02(2/) i-» «[/] • t J 

[ 01 (x) 1 ^ a[/] • s 
1 02(2/) >-> a [5] • s 
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> w 




CTl(yl) l-> < 




> z 1=1 < 




> w 




02(2/2) l-> < 






1. ' 




(71 (x) { }z 
CT2(y) ^ {}z 



w 1=1 {}z 



We shall demonstrate how these identities are used in Section [5] where we relate 
this term logic to the categorical semantics. 

4. Linear actegories 

Given a (symmetric) monoidal category srf we introduce the notion of a linear 
-actegory, which is a linearly distributive category St equipped with two functors 



St 



and 



x St 



the "actions" of si on St '. These must satisfy a number of coherence conditions 
which are described below. 

Our aim, in the following section, is to show that these form the categorical 
semantics for the proof theory of PMsg. 

4.1. Linearly distributive categories. A linearly distributive category is a cat- 
egory St equipped with a "tensor" ® : St x St — >■ St with unit T and coherent 
natural isomorphisms 

a®:(X®Y)®Z^X®(Y ®Z), I® : T <g> X — >- X, r® : X ©T -^X, 

and a "par" © : JT x 5T — 5- St with unit _L and coherent natural isomorphism 

« e :X®{Y®Z) — ^(AffiF)ffiZ, r e :X^-A©_L 

(the odd choice of direction is used to maximise the symmetry below), and two 
linear distributions 

d% :X®{Y®Z)^{X®Y)®Z and d% : (Y © Z) <g> X — © (Z © X) 

relating the two structures. This data must satisfy several coherence conditions 
(see [TS]). 

If both the tensor and the par are symmetric (with c® and c®) and several other 
coherence conditions are satisfied (again see |15j ) then it is called a symmetric 
linear distributive category. In this case there are two induced "permuting" linear 
distributions 



d| :X®{Y®Z)- 
Example 4.1. 



■Y®{X®Z) and d% : (Y © Z) © X — >■ (Y © X) © Z. 



(1) Any distributive lattice is a linearly distributive category with the objects 
being the elements and the maps being comparisons: © is the meet and © 
is the join. 

(2) Any monoidal category gives rise to a "compact" (i.e., © = ©) linearly 
distributive category. When both © and © are interpreted by the same 
tensor the linear distribution becomes associativity. 
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(3) Any *-autonomous category is a linearly distributive with A © B := (B* © 
A*). 

(4) The category of sets with <g> = x and © given as follows (due to Jiirgen 
Koslowski): 

' B A = % 
A@B=\a B = 

1 otherwise. 

This is an example of a non-compact, non-posetal, non-*-autonomous lin- 
early distributive category. 

4.2. Linear actegories. Let srf = (srf , *, /, a*, r*, c») be a symmetric monoidal 
category. A (symmetric) linear stf -actegory consists of the following data. 

• A symmetric linearly distributive category S£ (as above), 

• Functors 

o-.s^x^—^^ and • : ^/ op x X, 

such that o is the left parameterised left adjoint of •, i.e., for all A € srf , 
A o — -\ A • —. The unit and counit of this adjunction (natural in A e si 
and X € 3£) are denoted respectively by 

n>A,x ■ X^A* (Ao X) and e A ^ x ■ A o (A • X) X. 

• For all A, B e si and X, Y e Jf natural isomorphisms in S£ 
IoX^X, 

u. : X — ^1 • X, 
a* : (A* B) o X — >io (B o X), 
A* (B • X) — > (A* B) • X, 
Ao (X ®7)^(io X)®Y, 
(A» X) ® Y — • (X ®Y). 
For all A, B <E si and I,7e f natural morphisms in X 
d° B : A o (X © Y) — >■ (A o X) © y, 
: (yl.A)©y^-A.(A©y), 
rf° : 4o(B.I)^Bi(4oI). 



The symmetries of *, 
isomorphisms): 



5, and © induce the following permuting morphisms (or 



a, 

O 

a%. 



(A*B)oX- 
B»(A»X)- 

Ao(X®Y)- 
X@{A»Y)- 
Ao(X®Y)- 
X®(A»Y)- 



-Bo(AoX), 
■(A* B) • X, 

-a»(x®y), 
►ie(4oF), 
► A»(x®y). 



This data must satisfy several coherence conditions which we shall discuss shortly. 
Firstly we try to give some intuition behind the notation that has been chosen. 
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The "a" maps are (invertible) associativity isomorphisms and the "<f' maps are 
(non-invertiblc) linear distributions. The direction of the maps have been chosen 
(when there is a choice) to maximise the amount of symmetry and so that the o is 
pushed in a bracket and the • is pulled out of a bracket. This choice of notation 
may allow us to leave off the subscripts and let the types disambiguate the maps 
(which is not however done here). 

The symmetries of this data are as follows: 

[op'] Reverse the arrows and swap (g) and ©, T and _L, and o and •. This gives 
the following assignment of generating maps 



■u, 

' d&. 



-I® 
-a* 



d°^d° 



n- 



with the remainder of the morphisms unchanged. 

[*'] Reverse the * (i.e., A *' B = B * A); this assigns 



with the remainder unchanged. 
[<8>'] Reverse the £g>; this assigns 



- a s 



1$ 



with the remainder unchanged. 
[©'] Reverse the ©; this assigns 

a e s- u© * 

with the remainder unchanged. 
[*'] Reverse the *; this assigns 



-c 5 
-a° 



-a' 



d%, 



-d' 



d° m 



■d°, 



-i: 



with the remainder unchanged. 

[©'] There are four remaining symmetries obtained by reversing any combination 
of two or more of *, ®, and ®. The assignments are evident. 

The notion of a linear ^-actegory is preserved by these symmetries. It is im- 
portant to notice that the first symmetry is the most significant as it indicates a 
fundamental relationship between different functorial operations. 

The coherence conditions for a linear si -actegory are now described. 

[Symmetries.] The two diagrams below linking the symmetries and the associa- 
tivities must commute. 



Ao(X(g>Y) 



{AoX)®Y Ao(X®Y) 



Ao{Y®X) 



Y i 



V 

(AoX) 



Aoc 



Ao(Y®X) 



(AoX) ®Y 



Y®(AoX) 
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These diagrams and the results of applying the symmetries to them yield the fol- 
lowing equations: 



(1) 
(2) 



a «.;c<g. = (A o c®); a° & 
c ® = (A c©); a^/ 



c<g>;a© = a©/; (A»c®) 

c e! ^® = a ®'> • c ®) 

[Unit and associativity] The following diagrams linking the unit and associatively 
morphisms must commute. 



(A* I)oX 




(I * A) o X — ^ lo(AoX) 



r,oX 

' AoX 

o 

Ao(l®T) — ^ (AoI)0T 
These result in the following equations: 



AoX ^Ao(i$i) 



(3) 


a*; (A o u ) 


= o X 


(A»u.);a* 


= r- 1 • X 


(4) 


a*; u 


= I,oI 


w.; a* 


= C 1 • x 


(5) 




= Aor 8 


r ffi! a e 


= A* r© 




O . 7 


= A O Z® 


a ©' 


= A.Z© 


(6) 


(Aor e );c^ 


= r m 


^;(^»^) 


= r® 




(Ao/ e );4, 


= 


d%>r,(A»l®) 


= I® 



[Unit and distributivity] The following diagrams linking the unit and distributivity 
morphisms must commute. 



Io(X®Y) (IoX)®Y 

u (BY 

V 

X®Y 



Io(A»X) 




/ o (x <g> y) — ^- (/ o x) ® y 

T 

x®y 



AoX A °"'> io(J.I) 



A»X 

These result in the following equations: 

(7) d° e ;(u ®Y) =u a 
d^r, (y ® u ) = u 

(8) a°®;(u ®Y) = u 



I •(AoX) 



(u. <2>Y);d^= u. 
(y ® u.);d®, = u. 
(u, © y); a e = u. 
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(9) 
(10) 



a®,; (Y <K> u ) = u Q 
d°; (A • u ) = u 
<i°; (A • u ) = u 
A o u, ; d° = u. 



(Y © u,); a' & = u m 
(A o u,); d° = u, 
(A o m.); c?° = u, 
d°;A»u Q = u Q 



[Associativity.] The following diagrams are ones linking the various associativity 
morphisms. There are four pentagon shaped diagrams which must commute. 



a,oX 



(A*(B*C))oX 

Ao((B*C)oX) 



{{A * B) * C) o X 




Ao(Bo(C»X)) 

Aod° 



Aoa* 



(A * B) o (C • X) 



Ao(Bo(CoX)) 




C»{Ao(BoX)) 



(A* B)o(C o X) 
Ao(Bo(X®Y)) 

Aoal 



(A*B)o(X(g> Y) 




C»{{A*B)oX) 

(A o (X ® Y)) <g> Z 



Ao((BoX)®Y) 



((AoX)(g>Y)(g>Z 



A o ((X ® Y) ® Z) 




{Ao(BoX))®Y 



a* Q ®Y 

{{A* B)o X)®Y 
These result in the following equations: 

(11) (a*oX);a* ;(Aoa* ) =a* ;a* 
(a- 1 oX);a* ';(Aoa* ')=a* ';a* ' 

(12) a* ;(Aod°.);d°. = d°.;(C.a* ) 
a* ';(Aod°.);d°. = d°.;(C.a* ') 

(13) at ] (A a%y,(a%) = (a%y,(at®Y) 
at'-,(Aoa%y,(a%) = (a%y,(at'®Y) 
at;(Aoa%,y,(a%,) = (a% i y,(Y^at) 

at'-,(Aoa%,y,(a%,) = (a%,y,(Y®at') 

(14) a^; (a^ ® Z); a® = (A o a®); a°® 
a®>;{Z®a°,ya® 1 = (ioagVL 




Aoa 



(AoX)®(Y®Z) 
Ao{X®{Y®Z)) 

(A • a*); a*; (a" 1 • X) = a*,;a*, 
(A • a*' ) ; a*' ; (a* • X) = a*' ; a*' 
d°,;(A»d°,);a* = Coa*.;d* 
d°.;(A.d m y,a* ' =Coa;';d* 

a ©; ( A • a ffi); a t = K ® Y )' a © 
a ©; ( A • a®); <' = K' © y ); a © 

a^,;(A»a^,);a* = (Yea;);a$, 

a e';( A,a ®');<' = (^®o:');a©' 

a©; (a$ <g> Z); = a^; (A • a©) 
^(Zigxx*,)^*, = a ^,;(^.ae 1 ) 
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4o(Bo(i®y)) Bo(,4o(x®r)) 



Aoa° , 



Boa° 



Ao(X®(BoY)) Bo((AoX)®Y) 



(A o X) <g> (B o y) 



which results in the equations: 



(15) a*; (Aoa|,,);a|, = a* ;(Boa|);a^, a$; (A«a®,); a* = a* ; (B*o®); a%, 
a l\ { Aoa ®)\ a%> = a l 5 ( Boa ®>); a® a$,; < = a*'; (B«o^,); 

[Distributivity and associativity] Diagrams made up of the distributivity mor- 
phisms. There are five pentagon shaped diagrams which must commute. 



Ao(Bo(X @Y)) 

AodZ 



(A * B) o (X © y) 




Ao(b«(i® y)) 

Aod* 




B.(Ao(X®y)) 



Aopti)®y) 



(io(BoI))ffiF 



((A *B)oi)®y 




Bma°, 



B • (X <g> (Ao y)) 

(B.i)®(4or) 



4o ((x®y) ©z) 



Aod 



(Ao(X(g>Y))(3 Z 



Ao{X®{Y®Z)) 




(A o (y © z)) <g> x 

dg,<g)X 




Ao((y©z)®x) 



((4oi)®y)ez 



(ioI)«(F® z) 




((^ o y) © z) o x 



(A o Y) © (Z <g> X) 



Aod® 



Ao (y © (z®x)) 
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Ao((X®Y)®Z) 

d°cc 



Ao{X®{Y®Z)) 




{{AoX)®Y)®Z 



(AoX)®(Y® Z) 
These result in the following equations: 
(16) a* ;(Aod° e );d° B =d° B ;(a* ®Y) 
a;';(Aod|);d| = d° e ; (a* ' ® Y) 
a* ; (Ao =d° &] (Y®a* ) 
a* ';(Aod° e ,y,d° & =d° &] (Y®a* ') 
(A dr 9 y,d a m -,(B»a%,) = a%,-,<r 9 
(Aod^);dl;(B*a^) = a^d^ 
(Aod|);d|;(a|8^) = o|;d| 
(Aod|');d°;(a|, ©Z) = a|,;d|' 
(^od|');d^,;(Z©a|)=o|;d|' 
(Aod|);d|,;(Z8o|,) =o|,;d| 
a°;(d° ®X);d| = (Aod%);d° 



(a:®r);d| 

(r®o:);d|, 
(r®o:');di, 



(17) 
(18) 



(Boa;);^;^.^)^;;^ 
(a^®Z);d|;(A.d|) =d|;o^ 
(a|,®Z);d|;(A.d|') = <;a* 
(Z®o^);d|,;(^.d|') = d|';aJ 
(Z®a*,);dL;(A.(ig) = d|;a* 



(19) 



©;K©X);a^ =(T 9 ;(A< 



a°,;(X®^);, 



(A o d| ); d| d| ; (X © d| ); a* , = d« ; (A . df ) 



(20) 



o|;(d|,®A-);d|' = (Aorf®');^, 

a|,;(X®d|,);di = (^od|);d|' 
(Aoo®);d|;(d|8^) = d|;o© 
(Aoa" 1 );^,;^©^,) = d°,;a" 1 



d|;(d^,8A-);o^=d|,;(A.d|) 
d|;(X8d|,);o©' = d%,;(A»d®) 
(d® ® Z); (A • a®) = a®; d® 
(Z®d*,);d*,;(^»a- 1 ) = a- 1 ;rf*, 



There are additionally three hexagon shaped diagram which must commute. The 
first is 

(A* B) o (X Q) Y) 
Ao(Bo(X®y)) Bo(Ao(X®Y)) 



Aod°, 



Bad% 



Ao(X®{BoY)) Bo((AoX)®Y) 
(4oI)ffi(Bo7) 
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which results in the equations: 

(21) a* ;(Aod & );d° e = a* ' ;(Bod° e );d° & d|; {A,d%,); a*. = d%,; {B*d%); a*J 

at; (Aod m );d° e , = (Bod° & ); d° e (A.<£); a*. = d%; (B a*J 

The remaining two are 



Ao((B • X)®Y) 

Aod' 



Ao{{B*X)®Y) 

Aoa%. 



Ao{B»{X®Y)) (Ao(B*X))®Y Ao(B»{X®Y)) [Ao(B»X))®Y 



d°,®Y 



d°. 



d°,®Y 



B»(Ao{X®Y)) (B»(AoX))®Y B»(Ao(X®Y)) (B»{AoX))®Y 



B • ((A o X) <g> Y) 



B»{{AoX)®Y) 



and these result in the equations: 



(22) 



(23) 



a|,;(y® 

a^;K®F);^ 
d®,;(Y ®d°.);a®, 
a|,;(y® 



(^od|) ;< 5;(B.a|) 

(Ao^,);<;(s.a|,) 

(4og;<;(B^e) 
(B o (A. a|) 

(^°fleW;( B, 4) 
(Bo (A •<£,) 



[n and e.] Finally, there are diagrams linking the unit and counit of the Ao— H A* 
adjunction with / and the associativity and distributivity morphisms. 



n T,X 

X ^Jt(JoX) 




+ (A* B) • ((A* B) o X) 



(A*B)*a* 



A* (Ao X) 

A»n B ,Aox 

A»(B»(Bo(Ao X)) (A * B) • (B o (A o X)) 
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A»(Ao(X ® Y)) 




A»(Ao(X®Y)) 



X®Y 



A • {(A o X) ®Y) 




A*((AoX)®Y) 



a* ; £a*b,x = a* \Ao e BiA . X ', &A,x 



n A ,x®Y \ / d' % n A , x ®Y 

{A»{AoX))®Y (A* {Ao X)) ®Y 

With the symmetries this gives the equations: 

(24) n^x'J • u = u, 

(25) Ua*b,x\ (A*B)» a*' = n A ^ x ;A • n B:AoX ; a* m 

(26) nx®Y;{A*a% > ) = {n x ®Y);d% > 
"yw; {A • a° & ) = (Y ® 

(27) n XmY ;(A»d e ) = (nx®Y);a^ 
n Y(S x; (A • d|,) = (Y © n x ); oj, 

In the next section we will explore these diagrams in more detail. 
Example 4.2. 

(1) Given any monoidal closed category, regarding it as a compact linearly 



(Aoal) 
(Aoa' @1 ) 

(Aodl, ) 



ex®Y = a|; (e x ® Y) 
ey<g.A- = (Y ® e x ) 



distributive category it acts on itself via 

A o B = A <g> B and Au B 



A^B. 



This fails in general to give a linear actegory as the isomorphism : 
(A • X) ffi Y — >■ A • (X © y) is absent. However if one restricts the action 
to the compact objects (i.e., those objects for which the natural map (A — o 
I) ® B — > yl — o B is an isomorphism) then this becomes a linear actegory 
with actions as above. 

(2) Compact closed categories are, of course, a source of examples of the above. 
They are (compact) *-autonomous categories and so a bridge to the next 
example. They are important as not only are they the foundation for 
what Girard calls the "geometry of interaction" , but also for a family of 
compact closed categories (essentially span categories) which were studied 
by Abramsky [21 [3] under the name of "interaction categories" . These 
used explicit ideas from process calculus to give a categorical semantics for 
processes. Acting on themselves these give examples of linear actegories. 
Abramsky, Gay, and Nagarajan also considered adding "specifications" to 
these categories [3] which made them (mix) ^-autonomous categories and, 
thus, less degenerate models of linear actegories. 

(3) Given any linearly distributive category 3£ ', the objects which have linear 
adjoints (complements) form a ^-autonomous subcategory Map(i^). There 
is an obvious action of Map(^) on JT defined by AoX = A®X and AuX = 
A* © X (much as in the first example). In particular, a ^-autonomous 
category acting in the obvious manner on itself is a linear actegory. 

(4) None of the above examples illustrate well the separation of messages from 
the message passing. However, using Benton's approach [S] to models of 
linear logic (with exponentials), which links the intuitionistic terms to the 
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linear terms by a monoidal adjunction, gives an important model of a linear 
actegory where such separation is displayed. 

This model was used by Barber et al. [5J to provide a semantics for 
Milner's action calculus. As the action calculus was developed, in part, 
to provide a semantic framework for systems such as the 7r-calculus this 
suggests that there is a very close connection between the work of Barber 
et al. [5] and what is being proposed here. This is indeed the case, however, 
there are also some important differences. A model of their logic is an 
example of a linear actegory only when their monoidal closed category is 
actually a ^-autonomous category. In this regard linear actegories demand 
more structure. On the other hand, not every linear actegory arises in 
this manner. One very obvious reason is that in their setting the messages 
and the processes are still very closely linked by the adjoint and it is thus 
possible to turn process code into message code. While often in practice 
this may be a desirable feature, it may also be something that one does not 
want to allow. In our models we do not assume such a connection exists. 

If JT is a ^-autonomous category with an exponential comonad ! : 
S£ — s- S£ then, as described by Benton [9], the comonad induces a monoidal 
adjunction V h W : X — >■ where essentially W — ! and 2£\ is a carte- 
sian closed category. The action o : $>\ x 3£ — > S£ is 

XoY = W(X)(g)Y 

and as W(X X Y) = W(X) ® W(Y) this automatically gives an action. 
The action • : (J^)°p x SC % is given by 

XmY= W{X)* ®Y. 

That this is a linear actegory is now a straightforward, if lengthy, exercise. 

5. Categorical semantics 

We shall say that a linear ^-actegory is .^/-additive in case the monoidal cate- 
gory si is a distributive monoidal category (i.e., it has coproducts over which the 
tensor distributes) and the covariant action preserves these coproducts while the 
contravariant action turns them into products. 

Our aim is to show that the proof theory of the message passing logic, as repre- 
sented by the terms, forms a linear additive actegory in the above sense. To achieve 
this we shall show in this section how one may collect the proof theory for message 
passing into a linear additive actegory (completeness). In the next section we show 
that given any interpretation of the axioms into such a linear actegory one can 
extend the interpretation to the whole message logic (soundness). 

To preserve the sanity of reader and writer alike we shall present a recipe for 
these processes exemplifying only some of the details. These matters have already 
been well-explored for the message fragment and the linearly distributive fragment. 
Accordingly, when it comes to the details we shall focus on the actions. We begin 
by proving completeness. This involves showing: 

(a) The proofs of the message passing logic sequents with empty context and one 
input and output type 

%\X\VY 
form a linearly distributive category. 
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(b) The proofs of the message logic with one input (and necessarily one output) 

x : A h s : B 

form a distributive monoidal category. 

(c) The two required actions of a linear actegory are present together with the 
coherence maps and that they satisfy all the required coherences of the previous 
section. 

Parts (a) and (b) have been established in [15] and [TB] respectively so we shall 
concentrate our efforts on (c) . To begin this proof we need to establish the functorial 
nature of the actions. This, in turn, will lead into the naturality of the coherence 
maps and establishing the coherences. 

5.1. The actions are functors. Here is the definition of the action o : $tf x 
X — >- SC built from an arbitrary monoidal map / : A — s- B and a process s : 

x:Ahf:B s :: a : X Ih : Y 

0[f] • s :: x: A\a: Xh : BoY 
a(x)-0[f]-s :: | a : Ao X Ih : B oY 
In order to show that this is a functor we must show that it preserves composition. 
As composition amounts to a cut, this amounts to showing that cuts inside the 
functor can be equivalently expressed as a cut outside. Here is the calculation in 
reverse. 

a(x) ■ 0[f] ■ s fa 7(y) • S[g] ■ t => a(x) ■ (0[f] ■ s fa j(y) ■ 6[g] ■ t) 

=> a(x) ■ (y i-* s fa S[g] -t)f 

=^> a(x) ■ (y i-> 5[g] ■ (s fa t))f 

^> a(x) ■ S[(y i-> g)f] ■ (s fa t) 

Thus o preserves composition. As we shall see shortly, by definition, it preserves 
identities. 

The symmetry which is embodied in the term logic means that the action • : 
jz/ op x X — X has an identical term though the arrangement of the types is 
different. 

x:A\-f:B s :: a : X Ih : Y 

a[f] -s :: x : A \ a : B • X Ih : Y 
0(x)-a[f]-s :: | a : B • X Ih : AmY 
This means the preservation of composition (and identities) for • is essentially the 
same proof. 

5.2. Identities. We shall denote the identity map on a type by 

a = x ■■■■ a :X—^0 : X. 

However, its definition as a term depends on the type X. If the type is primitive 
then this identity is built-in and defined to behave in the correct manner. However, 
if X is not primitive we must provide an inductive definition. 

a —x is a =x for X a primitive type 



a=x®Y0 is a(ai, a 2 ) ■ 



01 i-> Oil =X 01 

02 i-» a 2 =Y 02 
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a 


=X®Y 





is 


0(0i 


2 ) -a 




a = T 





is 


<*<>■ 


0[] 




a =j_ 





is 


00- 


a[] 


a 


= AoX 





is 


a(x) 


■ 0[^)\ 


a 


= AmX 





is 


0(x) 





a x i ^ ai = x 0i 



■ a = x 

■ a = x 

Here x : AV- l{x) : A is the identity map in the message logic for the type A (where 
x here stands for a pattern in general). Notice also that this definition confirms 
that the functors (above) preserve identities. Clearly we also need an inductive 
definition of the identities in the message logic: 

x : A h l(x) : A is x : A h x : A for A a primitive type 
(x 1 y):A*BV- i{x 1 y):A*B is (x,y):A*B\- (i(x) , i{y)) : A * B 

{(Ti(x) i ► a (i(x)) 1 
}z:A + B 
o- 2 (y) >-> o-i(t(y)) J 

It remains to do an inductive proof that these terms do act as identity maps. We 
shall focus on the step for the covariant action to give a feel of how this inductive 
proof (which is straightforward) plays out. Consider 

a(x) ■ 0[i(x)} ■ a = x ;p s. 

We do an induction on the structure of the term s. There are two basic cases: either 
the leading structure of s interacts along the channel (3 or it does not. If it does not 
then this allows us to push the identity term inside the leading structure and to 
invoke the inductive hypothesis. This leaves the case in which there is interaction 
on and this means s must be of the form [3(y) ■ s' and we have 

a(x) ■ 0[i{x)] ■ a = x ;/3 0{y) ■ s' => a(x) ■ (y i-> a = x \p s')i(x) 

— > a(y) ■ a= x \ps' 
=> a(y) ■ s 

where we invoke the induction hypothesis to obtain the last step. 

5.3. Associativity and interchange. The associativity of composition, as rep- 
resented by a cut, must also be proven. The proof is again an inductive argument 
concerning the cut elimination process. Here we highlight some of the inductive 
steps of this argument which involve the action o : srf x SE — >- 3C . We consider 
the cases determined by terms which have their leading action on this type. This 
means the term is cither of the form a(x) ■ s or a[f] ■ s. We consider the first case 
in more detail. In a sequence of three cuts such a term can occur of course in 
three positions. For whichever position it occurs in it is shown that the inductive 
hypothesis may be used on a combination of smaller terms to show that the original 
term is associative. 

Consider the case when it is in the first position and the cut does not occur on 
a. The following diagram of cut elimination rewrites, where the bottom equality 
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uses the inductive hypothesis proves associativity in this case. 



(a(x) -s;pt) ;~ 



{a{x) ■ (s ;/3 1)) - n u 



a(x) -s;p{t - n u) 



a{x) • ((s ; 1) ; 7 u) |=| a(x) • (s ^ (i ; 7 m)) 

A very similar argument holds for the middle position provided a is not the inter- 
acting channel determined by the leftmost cut. 



s ; p (a(x) -t - n u) 



(s 5/3 a(x) ■ t) - n u 



(a(x) ■ (s ; t)) - n u 



a(x) ■ ((s ;p t) ; 7 u) \ \ a(x) ■ (s ; (t ; 7 u)) 

Now if a is the channel of the leftmost cut then either the leftmost terms leading 
action is on that channel or not. If it is not, we can move the cut inside the action. 
Now provided the second cut (on 7) is also not on that channel this can be moved 
inside the action and we can then invoke the inductive hypothesis. Fortunately, 
due to the way cut works, it is impossible for the outer terms to share a channel, 
thus the second cut is guaranteed to be independent of this action. 

This leaves the case when the leftmost terms leading action is on the channel. 
The following diagram then proves this case. 

(/?[/] • a ; P 0(x) -t) h u /?[/] • s ;p (f3(x) -t h u) 



(s 1/3 (x 1 ^ t)f) - n u 



(x h-> s ;pt)f - n u 



0[f\-s;f,0(x)-(t h u) 



s ]0 {x h-» (t - n u))f 



(x 1 ^ (s ; p t) ; 7 u)f \ I (x^> s ;p (t ; 7 u))f 

Similar arguments are now easily inferred for the term in the last position. 

5.4. The natural transformations. At this stage we have demonstrated that we 
have the basic functorial data for a linear actegory, namely a (distributive) monoidal 
category acting on a linearly distributive category in a covariant and contravariant 
way. It remains to show that the coherent transformations are present and satisfy 
the required conditions. 
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To accomplish this task we shall indicate the definition of the natural transfor- 
mations and illustrate how one establishes their naturality. Here is how one natural 
transformation from each of the major symmetry classes is defined in the term logic: 



r ffi :=0(l3 1 ,fo)-lh()-a=x 01 



a® := a(a\,a 2 ) • ai(au, a X2 ) ■ 



01 >-> an =x Pi 

021 l-» C*12 =Y 021 

022 l-> OL 2 =Z 022 



02^02 



a{ai,a 2 ) ■ ot\{ ) ■ a 2 =x 
a(a\,a 2 ) ■ a 2 { ) ■ «i =x 

01 i ^ a 2 =y 0i 

02 i-» ai =jsr /3 2 

a(())-a=x/3 
ot{{x,y)) ■ 0[x] ■ 0[y] -a= x 



c® := a(a.\,a 2 ) • 

* 



a| := a (a;) • a(ai,a 2 ) ■ 



01 I ^ • Q! =x /3i 

/3 2 i-> a 2 = x /3 2 



0(01,02} ■ a(ai,a 2 ) ■ a 2 
0(0 1 ,02}-a(x)-0 1 [x]-a 



cx.21 i-> /3 



/3 2 l-> Q!21 =Y 012 
a 2 2 i-» a 22 =z /?2 



a 2 i-> a 2 = x /3 2 

"(a;) • /%> • /3N • <*[y] ■ a i =x 0i 



n := 0(x) ■ 0[x] ■ a =x 

The natural transformations labeled with a should be isomorphisms. In partic- 
ular should be an isomorphism. It is not difficult to check that its inverse is 
given by 



(a|,) 1 := a(ai,a 2 ) • ai(x) ■ 0[x] ■ 



01 i ^ ai = x 0i 

02 i-> a 2 = x /3 2 



To show that these transformations are natural we must check that naturality 
conditions. We shall demonstrate what is involved for a^>, i.e., given / : A — ^B, 
s : W — >~Y, and t : X — ^Z, that the following categorical diagram commutes. 



Ao{W®X) 

fo(s® 

Bo(Y®Z) 



-^{AoW)®X 
(fo S )m 

i 

(B°Y)(g>Z 



38 



J. R. B. COCKETT AND CRAIG PASTRO 



We shall translate the upper route into a term and show that (without looking into 
/, s, or t) we can manipulate it into a form which is equivalent to the lower route. 
When we translate the terms s and t we shall indicate that it runs from channel a 
to (3 (i.e., s :: a : W — ^(3 : Y) by labeling it s[a; 0\. The top route then gives 



a(x) ■ a{a.\,a 2 ) • P 



Pi i-> @i[x] ■ ai = w Pi 
P 2 i-» a 2 =x Pi 



PkPuPl)'! 



71 i-> p x {x) ■ Ji[f{x)} • s[A;7i] 

72 i-» t[p 2 ;j 2 ] 



a{x) ■ a{a\,a 2 ) ■ [P\[x] ■ a\ =w Pi ;/3i a 2 = x Pi 

71 ^ ft (a;) • 7i[/(x)] • s[/3i;7i] 

7 

72 i-» q/925 72] 

7i i * ft [a;] • ai = w Pi ; f 3 1 Pi(x) • 71 [f(x)} • s[ft;7i] 
72 1-» a 2 =x ft ;/3 2 *[ft; 72] 

71 !-» 7i [/(«)] ' s[ai5 7i] 

72 i-> i[a 2 ;7 2 ] 



q;(.t) • a(ai, a 2 ) • 7 

a(a;} • a(ai, a 2 ) ■ 7 
and the bottom route 
a{x) ■ P[f(x)} ■ a{ai,a 2 ) ■ P 



Pi 1 * s[ai;ft] 
ft i-> t[a 2 ;ft>] 

P{y)-P{PuPi)-l 



a(x) ■ j/H a(ai,a 2 ) • P 



Pi 1 > s[ai;ft 
ft i-> i[a 2 ;ft 



71 ^ 71 [?/] ' Pi =Y 71 

72 l-» Pi = Z 72 

5/3 

71 ^ 7i [2/] • A =y 71 

72 l-> /?2 = Z 72 



/(*) 



a(x) • a(ai,a 2 ) • /3 



ft i-> s[ai;ft] 
Pi i[a 2 ;/?2 



P{PuPi)-l 
a(x)-a(ai,a 2 )- (s[ai;/3i] ^ (i[a 2 ;ft] : ' 
a(x) ■ a(ai,a 2 ) ■ 7 



71 !-» 7i [/(#)] ' ft =y 7i 

72 i-» ft =z 72 



71 ^ 7i [/(»)] ' Pi =y 7i 

72 l-» ft =Z 72 



71 ^ 7i[/0)] ' s[ai;/3i] ^ Pi = Y 7i 

72 1 ^ i[a 2 ;ft] ;/3 2 ft =z 72 



a(x) ■ a(ai, a 2 ) • 7 



71 ^ 7i[/0)] ' s[ai;7i] 

72 1 ^ t[a 2 ;72] 
which therefore proves the naturality of a%, . 
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5.5. Completeness. In order to establish completeness of the logic it is now nec- 
essary to check that all the coherence diagrams commute. This is a lengthy exercise 
most of which we will leave to the reader! 

We shall explicitly check the triangle equalities for the parameterised adjunction. 
Because of the symmetry it actually suffices to check just one: 

Aon x ;e A oX = ±AoX ■ Ao X^Ao X. 

Here is the explicit calculation: 

Aon x ;p e Ao x 

= a(w) ■ (3[w\ ■ (3(x) ■ *3[x) ■a= x 0; f i P(v) ■ /%] ■ (3{z) ■ l[z] ■ (3 =x 7 

=> a(w) ■ {(3{x) ■ 0[x] -a=xl3;p 0[w] ■ (3{z) ■ j[z] ■ (3 = x 7 ) 

=^> a(w) ■ (0[w] ■ a = x P ;/3 0{z) ■ j[z] ■ (3 =x 7) 

=^> a{w) ■ (a= x S3 \p l[w] ■ [3 = x 7) 

— > a(w) ■ 7[w] • a = x 7 = Uox- 

The other aspect of this setting we have not discussed is the coproducts. We 
expect that (A + B) o X is the coproduct of A o X and B o X. If we have proofs 



Sl :: I T,a : AoX Ih A 



and 



s 2 :: I T,a : BoX Ih A 



it is not hard to see (especially using the representability results discussed below) 
that one can construct a proof 

s :: I T,a : (A + B) oX Ih A. 

However if one has a proof s as above how does one see it as a cotuple of proofs? 

Consider the effect of substituting on a the identity map of (A + B) o X into s 
(where the first reduction is in reverse) : 



f3 =(A+B)oX Ot \ a S 

Ui{x) I ► (7 (x) 

0-2(2/) !-» cn(y) 




■ (3 =x a \ a s 



ol[<jq(x)\ ■ (3 = x a ; Q s 1 
• [3 =x a ; a s J 

a[a (x)} ■ s 1 

a Wi(y)} ■ s J 

This shows how the term s can be decomposed as a cotuple of the composites with 
the injections. Thus (A + B) o X is the coproduct of A o X and BoX. 

This completes our discussion of the completeness of the logic. We have shown 
that: 



Proposition 5.1. The terms of the message passing logic between single types with 
cut as composition form a linear additive actegory. 
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In fact, if srf is any monoidal category this shows how we can construct a linearly 
distributive category from stf and the empty poly-i2/-actegory (i.e., the initial linear 
^/-actegory) . The result is, of course, definitely a non-empty linear actegory: the 
units T and _L must always be present which implies that Aol and A • T for 
all A £ srf are non-trivial objects. It is also not hard to see that this will be a 
*-autonomous category as, inductively (A o X)* = A • X* and (A • Y)* ~ AoY* , 
with the base case the units. 

6. REPRESENTABILITY AND SOUNDNESS 

In the theory of polycategories represent ability plays a crucial role in getting 
between the purely categorical (object-to-object) view and the circuit (polycate- 
gorical) view of the maps. In fact, to be the category of mapsj^Jof a representable 
polycategory is precisely to be a linearly distributive category. Similarly to be the 
category of maps of a representable multicategory is precisely to be a monoidal 
category. 

For the message passing logic an exactly analogous correspondence holds: 

Theorem 6.1. To be the category of maps of a representable (additive) poly- 
actegory is precisely to be a linear (additive) actegory. 

Instead of a polycategory we must start with a polycategory with a multicate- 
gorical action: a poly- actegory. This makes the polymaps have a type which match 
the sequent structure of the message passing logic: composition in a poly-actegory 
is given by the two sorts of cut and the evident associativity and interchange laws 
must hold. Represent ability then entails the representability of all the features of 
the logic: the tensor, the par, and the two actions. To be a linear actegory is then 
precisely to be the maps in a representable poly-actegory. 

The soundness of the term calculus is therefore determined by its soundness 
in any representable poly-actegory. However, the equations of the term calculus 
were developed from the proof theory in Section [2] and Section [3] Thus with the 
identification of the proof theory with poly-actegories we have the soundness by 
construction. 

The purpose of this section is to introduce poly-actegories as a formulation of 
the proof theory of the message passing logic and to prove Theorem |6.1[ 

6.1. Poly-actegories and circuit representation. The proof theory for the two- 
sided cut rule lies in polycategories. Essentially they arc the natural deduction style 
proofs for the system. Polycategories have an extremely intuitive representation 
using circuits (see [10]). This gives further indication that the proof theory and its 
categorical formulation is capturing a very natural phenomenon. 

We wish to show how the proof theory of message passing, as represented by poly- 
actegories, may also be represented using circuits. Every proof in multiplicative 
linear logic has a presentation as a circuit [TO]. To extend this to the message 
passing logic we must describe how the two action rules are to be interpreted using 
circuits. 

A multicategory ^# has objects ob(^#) and multimaps x : <& — where $ C 
ob(^t). A polycategory has objects ob(^ a ) and polymaps u : T — s-A where 



In this section and in the sequel we will call a polymap or multimap with singleton domain 
and singleton codomain simply a map. 
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r,A C ob(^). Multimaps and polymaps are represented in the circuit notation, 
where suppose <& = Ai, . . . , A m , T = X\, . . . , X m , and A = Yj, . . . , Y n , as 




respectively. Since we consider symmetric multicategories and symmetric polycat- 
egories this allows the "wires" to cross. Often, to simplify the circuit notation, we 
will use a double line to indicate a possibly empty subset of objects as in 



$ r 




B A 



A poly-actegory 0£ is a polycategory 2? acted on by a multicategory jjt . What this 
means is that the polymaps in 5£ , instead of the usual polymaps as in & above, 
will contain inputs with types coming from both 8? and jjt . A typical example is 
s : <j> | T — ^A. These sorts of polymaps may also be represented using the circuit 
notation as 

o r 

A 

where the type of a wire indicates whether it is from ./# or 

There are two types of composition in a poly-actegory. The first composes a 
multimap in Ji with a polymap in 3£ . Given a multimap / : <f> — ^A in Jt and 
a polymap s : 'J, A, & \ T — s- A in 2£ . Composing (on A) results in a polymap in 
X of type 
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where the centre dot notation " • " represents cutting a multimap into a polymap. 
In circuit notation this is represented as 




A 



The second type of composition is between polymaps in 56 ' . Suppose s : $ | 
r — s-Ai,X, A2 and t : "J | T\,X, T2 — ^A are polymaps in 3£ . Composing (on 
X) results in a polymap in 56 of type 

|ri,r,r 2 — ►Ai.A.Aa. 

One possible simplified circuit diagram (in which Y2 = Ai — so that there are no 
crossings) for this cut is given by 

wr,o r 




A A 2 



All of the evident associativity and interchange laws must, of course, hold in any 
poly-actegory. 

There are circuits corresponding to introduction and elimination rules for each 
of the connectives ®, ©, T, and _L. We refer the interested reader to [TU] for the 
full story. Here we are interested in the action rules o and •. The introduction and 
elimination circuit diagrams for o, which we label by (o I) and (o E), are given in 
Figure [7] Notice the similarity to the introduction and elimination rules of the ® 
and © connectives [TP] , 

The • rule is a binding rule in the sense that the introduction rule must involve 
a "scope box" [T3] so that they are only applicable to the situation where one has 
a subcircuit C to attach the link to. It replaces a derivation A, $ | T lh X, A with 
a derivation $ | T lh A • X, A. The circuit diagrams, labeled by (• /) and (• E), 
are also given in Figure [7j With this rule notice the similarity to the introduction 
and elimination rules (including the scope box) for — o, the linear implication [14 . 

For any connective there are two types of circuit rewrites: reductions which 
allow one to simplify a circuit which involves an elimination rule immediately after 
an introduction rule, and expansions which "split" a wire carrying a compound 
formula into "simpler" wires, and ultimately to atomic wires. The reductions and 
expansions for o and • are given by in Figure [8] 
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(• I) 



A X 
A°X 

$ r 



A 






c 








•X 




A 



AoX 
(o E) A 




A X 
A A«X 

X 



where C in (• /) is a circuit. 



Figure 7. o and • circuit introduction and elimination rules 



In circuits, links are allowed to slide up or down corresponding to cut elimination 
steps or equations. For example, in simplified circuit notation, sliding of the o node 



I I 




corresponds to the [sequent-o/] cut elimination rule. This should be familiar, how- 
ever, the scoping rules for • may not be. We present the equations (where we have 
again slightly simplified the circuit notation) in Figure [9j 

6.2. Representability of the actions. There are natural bijections 

$,A|r,xihA $,A|rihy,A 

and 



$ I T,AoX Ih A 



$ I r lh A • Y, A 



obtained in the top-to-bottom direction respectively by the o ; and » r inference rules, 
and in the bottom-to-top direction by cutting respectively with the derivations 

idA idx idA id^ 

A h A 0|XlhX and A h A I X Ih X . 



A I X Ih AoX 



A I A.X Ih X 



These are called the representing polymaps for the covariant and contravariant 
actions respectively. They are clearly natural as when represented they are the 
identity maps. 
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A°X 




A°X 



A°X 




A°X 



<D r 




A'X 



a <d r 



UL 




X A 



A'X 



A*X 



Figure 8. Circuit reduction and expansion rules 




Figure 9. • scope rules 



The representing polymap of the covariant action may be described as a term: 
a[x] ■ 7 =x ol :: x : A | 7 : X lh a : A o X. 
which allows one to see the bijection at the level of the term logic. Suppose 

s :: $,x : A \ T,a : X lh A. 

The calculation 

a[x] ■ 7 =x a ; a a(y) ■ s — > 7 = x a ; a s 

where the first rewrite is the [o r -oj] cut elimination step, establishes one direction 
of the bijection. Now suppose 

t :: $ \T,a: AoX lh A. 

The other direction is given by 

j(x) ■ (a[x] ■ 7 = x a ; a t) => (7(0;) • a [a;] • 7 = x a) \ a t 
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=> 7 =AoX a ; a t 

where the first rewrite is the [o/-sequent] cut elimination step in reverse, and the 
second uses that j(x) • a[x] -7 =x ol is the identity on A o X. 

6.3. Representability for poly-actegories. The proof theory of the message 
passing logic is a poly-actegory. In this setting each polymap, besides having mul- 
tiple inputs and outputs can, in addition, have inputs from a multicategorical world. 
Although the inputs may be typed to come from different worlds, once this distinc- 
tion is erased one is simply left with a polycategory in which certain types are served 
by multimaps alone. This view determines the requirements on the poly-actegory 
composition. Demanding representability of the (multicategorical) tensor * and its 
unit /, the (polycategorical) tensor ® and its unit T, the par © and its unit _L, the 
covariant action o, and the contravariant action •, then forces, we claim, all the 
proof equivalences discussed in Section [374] for the message passing logic. 

To prove this would be stretching the patience of the reader and is, besides, 
relatively standard categorical proof theory Instead we shall focus on how a linear 
actegory arises from the maps of these settings. Given the circuit representation 
it is actually very straightforward to verify that the required coherence diagrams 
are satisfied. Thus, the main objective of this section is to show how the data of a 
linear actegory arises. 

A significant feature of a linear actegory is the parameterised adjunction between 
the covariant and contravariant action. This arises directly from the representability 
by the following two-way series of inferences: 

Ao X Ih Y 
A I X Ih Y 



Xtt- AmY 

We can also derive all the coherence isomorphisms using representability. Here 
we give the derivation of such for the binary connectives (the units coherences are 
derived in a similar manner): 

(A*B)oX\hY Xtt- (A*B)mY 



A* B \ X \\- Y A*B\Xtt-Y 



A, B \ X \\- Y a* : A,B\XW~Y 



A \ BoXttrY A \ X Ih BmY 



Ao(BoX)tt-Y Xtt- A»{B»Y) 

Ao(X®Y)\<tZ XhA»{Y®Z) 



A\X®Ytt-Z A\Xtt-Y®Z 



A I X, Y Ih Z al : A\X\hY,Z 



A o X, Y Ih Z X Ih A • Y, Z 



(A o X) ® Y Ih Z Xtt-(A*X)®Z 
To derive the distributions we have to use the poly-actegorical composition to- 
gether with the representing polymaps. The derivations are below, however, note 
that these are not derivations of the logic, but in a representable poly-actegory. 
In this setting we have just the poly-actegorical composition, the representing 
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polymaps, and the equivalences. The binary inference in each of the inferences 
below is the poly-actegorical composition. 

X®YhX,Y A\XhAoX A\AmXhX X,YhX®Y 

d° m : A \ X ®Y \^ Ao X,Y dL : A\ A* X,Y ' lh X ®Y 



A o (X © Y) lh (A o X) © Y (A» X) ®Y h Ao (X ®Y) 

B\B*Xh X A\Xh AoX 



d°, : A,B \ B • X\\- Ao X 

Ao(B*X)h B*(AoX) 

To prove soundness of the message passing logic we have presented a recipe which 
relies on the fact (established in the next section) that to be the category of maps 



of a representable poly-actegory is precisely to be a linear actegory (Theorem 6.1 1. 
To check that the proof equivalences of the message passing logic will hold in a 
representable poly-actegory is then straightforward. As an example, consider the 
coherence diagram (19) which we recall here: 

{Ao(Y® Z)) ® X 

{{AoY)®Z)®X 




Ao((Y ® Z)®X) 

{AoY)®{Z ®X) 



Aod' 



Ao(Y ®{Z®X)) 

It is an easy circuit calculation, which we show in Figures [To] and [TT] to see that 
both routes of the coherence diagram are equivalent. 
We conclude: 

Proposition 6.2. The category of maps of a representable poly-actegory form a 
linear actegory. 

6.4. Soundness. This section is devoted to showing that all the reductions and 
equations in a representable poly-actegory 3? (e.g., 9? = PMsg) hold in any linear 
actegory '. That is, we wish to show that given a linear actegory one may build 
from it a representable poly-actegory. Once again we concentrate on the action 
rules and refer the reader to the start of [12J for a description of representability, 
and to |15j . for soundness for representable polycategories. For simplicity, we will 
ignore most instances of associativity. 

The first step is to show how the two cut rules of a poly-actegory arise from the 
data of a linear actegory. The "action cut" of a multimap into a polymap will be 
described first. To this end suppose that we have a multimap and polymap 

f:<f>^A and s : A, * | Ti, X, T 2 — >■ A 

respectively that are represented by the maps (between singletons) 

f:®^A and s : fi <g) A o X f 2 A 
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Ao((Y®Z)®X) 




(AoY)®(Z®X) 




Figure 10. Circuit coherence calculation: top route 
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Ao((Y®Z)®X) 




(A°Y)(B(Z®X) 



Figure 11. Circuit coherence calculation: bottom route 

in X (the tildes over T's and <&'s indicating the results of representing). The 
composite of / and s on A should be a polymap in as 

(X) /•«:$,* | Tx.X.ra-^A. 

In we may form the composite 

~ ~ ~ 1®/oX®1 ~ ~ s ~ 

Ti ® $ o x © r 2 =- r x ® ^4 o x <g) r 2 — >■ a 

which, by reversing representability, gives the desired polymap (pC|. 

The composite of two polymaps can be defined in a similar manner. Suppose 
that 

s : $ | r— >Ai,JC,A 2 and f : * | r X) X, T 2 A 
are polymaps represented by 

s:f ^(Ai©X)©A 2 and t: f x ® (X ® f 2 ) — >-A . 
The composite of s and ion J should be a polymap in ^ as 
(Y) s;t:$,* |r 1 ,r,r 2 ^A 1 ,A,A 2 . 

In 2^ we may form the composite 

fi <g> f <g> f 2 10SC31 > f i ® ((Ai 91)9 A 2 ) © f 2 

5- Ti © ((Ai © X) © r 2 ) © A 2 — >- Ti © (Ai © (X © T 2 )) © A 2 
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ei 



A 1 ©(r 1 (8)(X(g)r 2 ))©A 2 



Ai© A© A 2 



which, by reversing representability, gives the desired polymap (jYj). 

This shows how the two cuts arise in the representable poly-actegory built from 
a linear actegory. Associativity and the interchange laws follow from a combination 
of functoriality, naturality, and associativity in 3C . As an example suppose there 
are multimaps and a polymap 

/:$—>- A, /':$'— ^ A', aQds:*i,A,* 2) >l',*3 | T, X, r 2 , X', T 3 ^ A 

which arc represented as 

7':$'^- A', and s : F © A o X © f 2 © A' o X' © f 3 — >- A. 

If the interchange law is to hold then 

/•(/'• *)=/'• (/•*)• 

From the definition the left-hand side and right-hand side respectively are given by 
reversing representability in the composites below. 



r®$oi®r 2 ®$'oi'®r 3 

iig>7ox<g>i®i®i 

f © a o x © r 2 © o x' © r 3 

''oX'®l 



r ® a o x © r 2 (g) A' o x' <g> r 3 



r © $ o x © r 2 © o a' © r 3 

l®l(g)l(g)7'oX'(g)l 

r © $ o x © r 2 © A o x' © f 3 
r © a o x © r 2 © A' o x' © f 3 



That both composites are equal follows from functoriality of ©. 

Proposition 6.3. Every linear actegory is the category of maps of some repre- 
sentable poly-actegory. 



This now proves Theorem 6.1 that to be a linear actegory is precisely to be the 
category of maps of a representable poly-actegory. 

Coproducts in the polycategorical setting are discussed extensively in [25 ■ They 
have not been mentioned the discussion of this section as their presence or absence 
is completely orthogonal to the main result. 



7. Conclusion 



We have now completed the tour of the diagram connecting proof theory, cate- 
gorical semantics, and term calculus as promised: 
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proof theory 



$E3 



category theory 



poly-actegory 



linear actegory 





term calculus 



message passing 



A reasonable question to ask is whether we really have a complete set of coherence 
diagrams and of equations. Our response to this is, of course, that we did try to 
be reasonably complete. However, we are happy to admit that, in a system of this 
size, it is quite possible that we have overlooked something. That said, however, as 
we now have at least three different ways to view the subject matter all of which 
agree, we are confident that the basic story is complete and that these ideas, insofar 
as they are not completely fleshed out here, can be. 

The aim of the paper was to show that message passing could be accommodated 
in the proof theoretic framework for concurrency provided by the two-sided proof 
theory of cut elimination (which is a fragment of linear logic). In particular we feel 
that by providing a categorical semantics we have anchored this correspondence 
in a way which will facilitate the exploration of semantic models. Thus, we feel 
that we have now lain out the story of how message passing can be modeled proof 
theoretically and categorically in sufficient detail to establish the viability of this 
perspective. There remains a lot to be done. 

In the process of writing the paper the proof system underwent a number of 
downsizing changes in an attempt to make it more manageable. For example, 
the additives at the message passing level were sacrificed for this reason. From 
the programming perspective, features such as (the initial and final) datatypes are 
desirable at both levels and this is an aspect to which we would like to return. 
Particularly, at the message passing level datatypes are of significant interest as 
they allow the expression of communication protocols in a formal manner. 
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